How to block ICQ instant messenger communication using BorderManager 3.x

(Last modified: 21Aug2002)

This document (10061337) is provided subject to the disclaimer at the end of this document.

goal

fact

Novell NetWare 5

Novell NetWare 5.1

Novell BorderManager 3.5

Novell BorderManager 3.6

ICQ 2000

Mirabilis ICQ

America Online AOL ICQ

fix

This fix requires TCP/IP filtering support. Verify filter support is enabled by loading INETCFG from the server console, selecting 'Protocols', 'TCP/IP', and verify 'Filter Support' is set to 'Enabled'. NetWare supports Packet Forwarding Filters and Routing Information Filters. You can configure these filters through FILTCFG.NLM.

Once you have verified TCP/IP filtering support is enabled, load the Filter Configuration NetWare Loadable Module at the server console.

LOAD FILTCFG

Select 'Configure TCP/IP Filters' then 'Packet Forwarding Filters'. Verify the 'Status' is 'Enabled'.

If the 'Action' is set to 'Deny Packets in Filter List', press enter on 'Filters' containing the highlighted text '(List of Denied Packets)'. Displayed will be a list of the currently configured TCP/IP Forwarding Filters, in DENY mode. Press the INSERT key to define a new DENY filter for ICQ. Modify the 'Dest Addr Type' field, selecting 'Host' instead of 'Any Address'. Select the 'Dest IP Address' field. Enter '64.12.162.57' in the 'Address' field, press the ESC key to keep changes. You may optionally enter a reference to ICQ in the comment field. Press the ESC key, and choose 'Yes' to save the DENY filter. Create an additional DENY filter for the following host address: 205.188.179.233

If the 'Action' is set to 'Permit Packets in the Filter List', press enter on 'Exceptions' containing the highlighted text '(List of Packets Always Denied)'. Displayed will be a list of the currently configured EXCEPTIONS to the TCP/IP Forwarding Filters. Press the INSERT key to define a new EXCEPTION filter for ICQ. Modify the 'Dest Addr Type' field, selecting 'Host' instead of 'Any Address'. Select the 'Dest IP Address' field. Enter '64.12.162.57' in the 'Address' field, press the ESC key to keep changes. You may optionally enter a reference to ICQ in the comment field. Press the ESC key, and choose 'Yes' to save the EXCEPTION filter. Create an additional EXCEPTION filter for the following host address: 205.188.179.233

The default Internet address of the ICQ Inc., ICQ instant messaging service is login.icq.com, this address is used in the ICQ authentication process. The address is valid at the time of this writing and is subject to change at any time.

The default authentication server is obtain by loading the ICQ instant messaging client (Windows platform) and left-clicking the 'ICQ' icon (main menu), left-click 'Preferences', left-click 'Connections', left-click 'Server' tab, left-click 'Reset', and viewing the 'Host:' input box.

The following is a NSLOOKUP query for login.icq.com which reveals DNS entries, such as A, MX, NS, PTR, about a hostname, domain name or IP address. This assumes that the selected DNS contains information about the hostname, domain name or IP address in question.

Non-authoritative answer:
login.icq.com        Internet (IPv4) address = 64.12.162.57
login.icq.com        Internet (IPv4) address = 205.188.179.233

Authoritative answers can be found from:
ICQ.com        nameserver = DNS-01.ICQ.NET
ICQ.com        nameserver = DNS-02.ICQ.NET
DNS-01.ICQ.NET        Internet (IPv4) address = 152.163.159.234
DNS-02.ICQ.NET        Internet (IPv4) address = 205.188.157.234

By performing this query we can see that login.icq.com is associated with two IP addresses. This may change at any time, so it is recommended you perform your own NSLOOKUP when implementing this solution.

Additional solutions are available to block AOL Instant Messenger, MSN Messenger, and Yahoo! Instant Messenger..

document

Document Title:	How to block ICQ instant messenger communication using BorderManager 3.x
Document ID:	10061337
Solution ID:	NOVL43575
Creation Date:	26Mar2001
Modified Date:	21Aug2002
Novell Product Class:	novell bordermanager services

disclaimer

The Origin of this information may be internal or external to Novell. Novell makes all reasonable efforts to verify this information. However, the information provided in this document is for your information only. Novell makes no explicit or implied claims to the validity of this information.
Any trademarks referenced in this document are the property of their respective owners. Consult your product manuals for complete trademark information.